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Question: 1 


You network contains one Active Directory domain named contoso.com. 

You deploy a new virtual machine in Microsoft Azure, and then you run the Active Directory Domain 
Configuration Wizard as show in the exhibit. (Click the Exhibit button.) 

***Exhibit is Missing*** 

You need to ensure that all of the users in contoso.com are replicated to the new domain controller 
in Azure. 

What should you do? 


A. Configure Azure Active Directory Connect. 

B. Set up directory integration. 

C. Modify the Deployment Configuration option. 

D. Select the Domain Name System (DNS) server check box. 


Answer: D 


Question: 2 


Your network contains one Active Directory domain named contoso.com. The domain contains 10 
domain controllers and a read-only domain controller (RODC) named RODCO1. 

You need to ensure that when administrators create users in contoso.com, the default user principal 
name (UPN) suffix is litwareinc.com. 

Which cmdlet should you use? 


A. the ntdsutil command 

B. the Set-ADDomain cmdlet 

C. the Install-ADDSDomain cmdlet 
D. the dsadd command 

E. the dsamain command 

F. the dsmgmt command 

G. the net user command 

H. the Set-ADForest cmdlet 


Answer: G 


The following example demonstrates how to create a new UPN suffix for the users in the 
Fabrikam.com forest: 

Set-ADForest -UPNSuffixes @{Add="headquarters.fabrikam.com"} 

Reference: Creating a UPN Suffix for a Forest 
https://technet.microsoft.com/sv-se/library/Dd391925(v=WS.10).aspx 


Question: 3 
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Your network contains one Active Directory domain named contoso.com. The domain contains 10 
domain controllers and a read-only domain controller (RODC) named RODCO1. 

You plan to replace a domain controller named DC1. DC1 has the schema operations master role. 

You need to transfer the schema master role to another domain controller named DC10 before you 
remove Active Directory from DC1. 

Which tool should you use? 


A. the ntdsutil command 

B. the Set-ADDomain cmdlet 

C. the Install-ADDSDomain cmdlet 
D. the dsadd command 

E. the dsamain command 

F. the dsmgmt command 

G. the net user command 

H. the Set-ADForest cmdlet 


Answer: A 


Explanation: 

To transfer the schema master role using the command line: 
Open Command Prompt. 

Type: 

ntdsutil 

At the ntdsutil command prompt, type: 

roles 

At the fsmo maintenance command prompt, type: 
connection 

At the server connections command prompt, type: 
connect to serverDomainController 

At the server connections command prompt, type: 
quit 

At the fsmo maintenance command prompt, type: 
transfer schema master 

Reference: Transfer the schema master role 


Question: 4 


Your network contains an Active Directory domain named contoso.com. The domain contains a 
server named Server1 that runs Windows Server 2012 R2 and has the DHCP Server server role 
installed. 

An administrator installs the IP Address Management (IPAM) Server feature on a server named 
Server2. The administrator configures IPAM by using Group Policy based provisioning and starts 
server discovery. 

You plan to create Group Policies for IPAM provisioning. 

You need to identify which Group Policy object (GPO) name prefix must be used for IPAM Group 
Policies. 

What should you do on Server2? 
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A. From Server Manager, review the IPAM overview. 
B. Run the ipamgc.exe tool. 

C. From Task Scheduler, review the IPAM tasks. 

D. Run the Get-lpamConfiguration cmdlet. 


Answer: D 


Question: 5 


You have two Hyper-V hosts named Host1 and Host2 that run Windows Server 2012 R2. Hosts a 
virtual machine named VM1 that is replicated to Host2. The solution must ensure that clients 
continue to connect to VM1 on Host1. 

Which cmdlet should you run? 


A. Compare-VM 

B. Export-VM 

C. Test-VMReplicationConnection 
D. State-VMFailover 

E. Move-VM 


Answer: D 


Explanation: 

Start-VMFailover -AsTest 

Creates a test virtual machine using the chosen recovery point. You can use a test virtual machine to 
validate a Replica virtual machine. To stop a test failover, use the Stop-VMFailover cmdlet. 

The Start-VMFailover cmdlet can be used for the following tasks: 

Fail over a Replica virtual machine to a chosen recovery point. 

Start a planned failover on a primary virtual machine. 

Create a test virtual machine on a Replica virtual machine. 

Reference: Start-VMFailover 

https://technet.microsoft.com/en-us/library/jj136051(v=wps.630).aspx 


Question: 6 


You perform a Server Core Installation of Windows Server 2012 R2 on a server named Server1. 
You need to add a graphical user interface (GUI) to Server1. 
Which tool should you use? 


A. The imagex.exe command 
B. The ocsetup.exe command 
C. The setup.exe command 
D. The dism.exe command 


Answer: D 
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The DISM command is called by the Add-WindowsFeature command. Here is the systax for DISM: 
Dism /online /enable-feature /featurename:ServerCore-FullServer /featurename:Server- Gui-Shell 
/featurename:Server-Gui-Mgmt 


oa Administrator: Windows PowerShell |= /o 


Ilam bf mereinen pamper aera nent a aeann = 
BPS C:\w2612> Dism /Mount-Image /ImageFile:C:\w2612\image\install.wim /index:4 M 
ountDir:C:\w2@1i2\MountPoint /ReadOnly 


Deployment Image Servicing and Management tool ? 
Wersion: 6.2.9200.16384 


Mount ng image 


The operat z . 
ars C= \w212> Dien Zonline /enable- Festus /featurename :Server—Gui-Mgmt /featureng 
ame :-Server—Gui-Shell /featurename :-ServerCore—FullServer /source:c:\w2612\MountPo 


int\windows \winsxs 


A 


Deployment Image Servicing and Management tool 
Nersion: 6.2.9200.16384 


Image Version: 6.2.9200.16384 


Enabling feature<s)> 


The operation completed successfully. 
Restart Windows to complete this operation. 
Do you want to restart the computer now? CY/ND 


Question: 7 


You have a server named Server1 that runs Windows Server 2012 R2. 

You plan to create an image of Server1. 

You need to remove the source files for all server roles that are not installed on Server1. 
Which tool should you use? 


A. dism.exe 

B. servermanagercmd.exe 
C. ocsetup.exe 

D. imagex.exe 


Answer: A 


Explanation: 

servermanagercmd.exe The ServerManagerCmd.exe command-line tool has been deprecated in 
WindowsServer 2008 R2. imagex.exe ImageX is a command-line tool in Windows Vista that you can 
use to create and manageWindows image (.wim) files. A .wim file contains one or more volume 
images, disk volumes that containimages of an installed Windows operating system. dism.exe 
Deployment Image Servicing and Management (DISM.exe) is a command-line tool that canbe used to 
service a Windows?image or to prepare a Windows Preinstallation Environment (WindowsPE) 
image. It replaces Package Manager (Pkgmgr.exe), PEimg, and Intlcfg that were included inWindows 
Vista? The functionality that was included in these tools is 

now consolidated in one tool(DISM.exe), and new functionality has been added to improve the 
experience for offline servicing. DISMcan Add, remove, and enumerate packages. ocsetup.exe The 
Ocsetup.exe tool is used as a wrapper for Package Manager (Pkgmgr.exe) and for Windowslnstaller 
(Msiexec.exe). Ocsetup.exe is a command-line utility that can be used to perform scripted installs 
andscripted uninstalls of Windows optional components. The Ocsetup.exe tool replaces the 
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Sysocmgr.exe tool thatWindows XP and Windows Server 

2003i use. 

http://technet.microsoft.com/en-us/library/hh824822.aspx 
http://blogs.technet.com/b/joscon/archive/2010/08/26/adding-features-with- dism.aspx 
http://technet.microsoft.com/en-us/library/hh831809.aspx 
http://technet.microsoft.com/en-us/library/hh825265.aspx 


Question: 8 


You have a server named Server1 that runs Windows Server 2012 R2. Server1 has following storage 
spaces: 

Data 

Users 

Backups 

Primordial 

You add an additional hard disk to Server1. 

You need to identify which storage space contains the new hard disk. 

Which storage space contains the new disk? 


A. Primordial 
B. Data 

C. Backups 
D. Users 


Answer: A 


Explanation: 

New Disks (Unallocated space) added to Primordial spacePrimordial Pool? All storage that meets 
acceptable criteria for Storage Spaces will be placed in the Primordial Pool. Thiscan be considered 
the default pool for devices from which any other pools will be created. Notice that there are no 
other virtual disks or pools at this point. The Primordial Pool will only consist of physical storage 
devices that do not belong to any other pools. 
http://blogs.technet.com/b/canitpro/archive/2012/12/13/storage-pools-dive-right-in.aspx http:// 
blogs.technet.com/b/askpfeplat/archive/2012/10/10/windows-server-2012-storagespaces-is- it for- 
youcould-be.aspx 


Question: 9 


Your network contains an Active Directory domain named contoso.com. The domain contains a 
server named Server1. Server1 runs Windows Server 2012. 

You create a group Managed Service Account named gservice1. 

You need to configure a service named Service1 to run as the gservice1 account. 

How should you configure Service1? 


A. From a command prompt, run sc.exe and specify the config parameter. 


B. From a command prompt, run sc.exe and specify the sdset parameter. 
C. From the Services console, configure the General settings. 
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D. From Windows PowerShell, run Set-Service and specify the -PassThrough parameter. 


Answer: A 


To specify a binary path for the NEWSERVICE service, type: 

sc config NewService binpath= "ntsd -d c:\windows\system32\NewServ.exe" 
Reference: Sc config 
https://technet.microsoft.com/en-us/library/cc990290.aspx 
http://technet.microsoft.com/en-us/library/cc738230(v=ws.10).aspx 


Question: 10 


You have a server named Data1 that runs a Server Core Installation of Windows Server 2012 R2 
Standard. 

You need to configure Data1 to run a Server Core Installation of Windows Server 2012 R2 Datacenter. 
You want to achieve this goal by using the minimum amount of administrative effort. 

What should you perform? 


A. An online servicing by using Dism 

B. An offline servicing by using Dism 

C. An upgrade installation of Windows Server 2012 R2 
D. A clean installation of Windows Server 2012 R2 


Answer: A 


Explanation: 

A. Not least effort 

B. Not least effort 

C. dism /online /set-edition 

D. offline would be less ideal and more workex: DISM /online /Set-Edition:ServerEnterprise / 
ProductKey:489J6-VHDMP-X63PK-3K798-CPX3YWindows Server 2008 R2/2012 contains a command- 
line utility called DISM (Deployment Image Servicing andManagement tool). This tool has many 
features, but one of those features is the ability to upgrade the edition ofWindows in use. Note that 
this process is for upgrades only and is irreversible. You cannot set a Windowsimage to a lower 
edition. The lowest edition will not appear when you run the /Get-TargetEditions option. If the server 
is running an evaluation version of Windows Server 2012 

R2 Standard or Windows Server 2012 R2Datacenter, you can convert it to a retail version as follows: 

If the server is a domain controller, you cannot convert it to a retail version. In this case, install an 
additionaldomain controller on a server that runs a retail version and remove AD DS from the 
domain controller thatruns on the evaluation version. From an elevated command prompt, 
determine the current edition name with the command DISM /online /Get-CurrentEdition. Make 
note of the edition ID, an abbreviated form of the edition name. Then run DISM /online /Set- 
Edition:<edition ID> /ProductKey:XXXXXXXXXX-XXXXX-XXXXXXXXXX 

/AcceptEula, providing the edition ID and a retail product key. 

The server will restart twice. 

http://technet.microsoft.com/en-us/library/jj574204.aspx 
http://technet.microsoft.com/en-us/library/dd744380%28v=ws.10%29.aspx 
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http://blogs.technet.com/b/server_core/archive/2009/10/14/upgrading- | windows-server2008-r2- 
without-media.aspx 
http://communities.vmware.com/people/vmroyale/blog/2012/05/30/howto-upgradingwindows- 
edition-with-dism 


Question: 11 


Your network contains an Active Directory forest named contoso.com. 
The forest contains two domains named contoso.com and child.contoso.com and two sites named 
Site1 and Site2. The domains and the sites are configured as shown in following table. 


Domain Domain name Site name Role 
controller name 


Contoso.com Sitel Global catalog 
RID master 
PDC emulator 


Contoso.com Domain naming master 
Schema master 
Infrastructure master 


Child.conteso.com |Sitel Infrastructure master 


RID master 
PDC emulator 


DC4 Child.contoso.com |Site2 Not applicable 


When the link between Site1 and Site2 fails, users fail to log on to Site2. 

You need to identify what prevents the users in Site2 from logging on to the child.contoso.com 
domain. 

What should you identify? 


A. The placement of the infrastructure master 
B. The placement of the global catalog server 

C. The placement of the domain naming master 
D. The placement of the PDC emulator 


Answer: B 


Question: 12 


Your network contains an Active Directory forest that contains two domains. The forest contains five 
domain controllers. 
The domain controllers are configured as shown in the following table. 
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Domain controller name Domain Global catalog server 
DC1 Contoso.com Yes 


DCS 


Eu.contoso.com 


Eu.contoso.com No 


You need to configure DC5 as a global catalog server. 
Which tool should you use? 


A. Active Directory Administrative Center 
B. Active Directory Users and Computers 
C. Active Directory Sites and Services 

D. Active Directory Domains and Trusts 


Answer: C 


Explanation: 

Active Directory Sites and Services can be used to Add or remove the global catalog read-only 
directory partitions from a domain controller in the site. Confirm that all read-only directory 
partitions have been replicated to the new global catalog server. As well as verify that the global 
catalog server is being advertised in Domain Name System (DNS). 

References: 

http://technet.microsoft.com/en-us/library/cc730868.aspx 
http://technet.microsoft.com/en-us/library/cc770674.aspx 


Question: 13 


Your network contains an Active Directory forest. The forest contains a single domain named 
contoso.com. The domain contains four domain controllers. 
The domain controllers are configured as shown in the following table. 


Name | Operating system 
DC1 


Windows Server 2008 R2 Domain naming master 
Schema master 
Giobal catalog 


DC2 Windows Server 2012 R2 PDC emulator 
Giobal catalog 


Dc3 [Windows Server 2008 R2 Infrastructure master 


Windows Server 2012 R2 RID master 
Global catalog 


All domain controllers are DNS servers. 

You plan to deploy a new domain controller named DC5 in the contoso.com domain. 

You need to identify which domain controller must be online to ensure that DC5 can be promoted 
successfully to a domain controller. 

Which domain controller should you identify? 


https://www.certkillers.net 


Questions & Answers PDF Page 10 


A. DC1 
B. DC2 
C. DC3 
D. DC4 


Answer: D 


Question: 14 


Your network contains an Active Directory forest named contoso.com. All domain controllers 
currently run Windows Server 2008 R2. 

You plan to install a new domain controller named DC4 that runs Windows Server 2012 R2. 

The new domain controller will have the following configurations: 

Schema master 

Global catalog server 

DNS Server server role 

Active Directory Certificate Services server role 

You need to identify which configurations cannot be fulfilled by using the Active Directory Domain 
Services Configuration Wizard. 

Which two configurations should you identify? (Each correct answer presents part of the solution. 
Choose two.) 


A. Enable the global catalog server. 

B. Transfer the schema master. 

C. Install the Active Directory Certificate Services role. 
D. Install the DNS Server role. 


Answer: B, C 


Explanation: 
AD Installation Wizard will automatically install DNS and allows for the option to set it as a global 
catalog server. ADCS and schema must be done separately. 


Specify domain controller capabilities and site information 


geenen s e 


[C] Read only domain controller (RODC) 


Site name | Defauilt-First-Site- Name |» 


Type the Directory Services Restore Mode (DSRM) password 
Password: 


Confirm password: 
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Question: 15 


You have a server named Server1 that runs Windows Server 2012. 

You promote Server1 to a domain controller. 

You need to view the service location (SRV) records that Server1 registers in DNS. 
What should you do on Server1? 


A. Open the Netlogon.dns file. 

B. Run ipconfig /displaydns. 

C. Run Get-DnsServerDiagnostics. 
D. Open the SrC. sys file. 


Answer: A 


Explanation: 

Netlogon.dns - If you are using non-Microsoft DNS servers to support Active Directory, you can verify 
SRV locator resource records by viewing Netlogon.dns. Netlogon.dns is located in the 
Y%systemroot%\System32\Config folder. You can use a text editor, such as Microsoft Notepad, to view 
this file. 

The first record in the file is the domain controller's Lightweight Directory Access Protocol (LDAP) SRV 
record. 

References: 

http://support.microsoft.com/kb/816587/en-us 


Question: 16 


Your network contains an Active Directory domain named adatum.com. The domain contains a 
member server named Server1 and a domain controller named DC2. All servers run Windows Server 
2012 R2. 

On DC2, you open Server Manager and you add Server1 as another server to manage. 

From Server Manager on DC2, you right-click Server1 as shown in the exhibit. (Click the Exhibit 
button.) 
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Server Manager > DHCP 


— ti SERVERS 
Dashboard AÑ serve t tota 


Locat Server | A Configuration cequired for DHCP Server at SERVERT 


All Servers 
2 27 «2S 
if AD OS P 


berver Name iPy4 Address Manageabulity Last 


. Add Roles and Features 


File and Storage Servi 
Restart Server 
us 
a Computer Management 
REMOTE ACCESS r 
Remote Desktop Connection 
Windows PowerShell 
Configure Network Adapter Teaming 
Configure Windows Automatic Feedback 


Manage As 


EVENTS 


Start Performance Counters 
Remove Server 
Refresh 


- 
Copy 


You need to ensure that when you right-click Server1, you see the option to run the DHCP console. 
What should you do? 


A. On DC2, install the Role Administration Tools. 

B. On DC2 and Server1, run winrmquickconfig. 

C. In the domain, add DC2 to the DHCP Administrators group. 
D. On Server1, install the Feature Administration Tools. 


Answer: A 


Explanation: 
You need to install the feature administrations tools for the dhcp . Need to install DHCP management 
tools on DC2 then you will have access to dhcp management. 


Question: 17 


Your network contains an Active Directory domain named contoso.com. The domain contains three 
servers named Server1, Server2, and Server3. 

You create a server group named ServerGroup1. 

You discover the error message shown in the following exhibit. (Click the Exhibit button.) 
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on SERVERS 
E Dashboard . 3 ww mas v 


z Local Server 
Ba Al Servers 
i AD OS ota haar PidAddrets Mogoda pst Update 
a DNS ntt 


ER Fite and Storage Setvices > 


SERVERI 1921682101 Onüne - Performance counters rot started 


AIND GOS 
En Sev ILMALE Onine - Acess denied nara 05 
| Ba Severo | SERVERI 1911642103 Target computer mot accedie 12/3/2012 GOs 


EVENTS 


You need to ensure that Server2 can be managed remotely by using Server Manager. 
What should you do? 


A. On Server2, run the netdom.exe command. 

B. On Server2, run the net stop netlogon command, and then run the net start netlogon command. 
C. On DC1, run the Enable-PSSessionConfigurationcmdlet. 

D. On Server2, modify the membership of the Remote Management Users group. 


Answer: D 


Explanation: 

This is a security issue. To be able to access Server2 remotely through Server Manager the user need 
to be a member of the Remote Management Users group. 

References: 

Training Guide: Installing and Configuring Windows Server 2012, Chapter 3 Server Remote 
Management, Lesson 1: Server Manager, p. 90-92 


Question: 18 


Your network contains an Active Directory domain named contoso.com. All servers run Windows 
Server 2012 R2. The domain contains a server named Server1. 
You install the Windows PowerShell Web Access gateway on Server1. 
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You need to provide administrators with the ability to manage the servers in the domain by using the 
Windows PowerShell Web Access gateway. 

Which two cmdlets should you run on Server1? (Each correct answer presents part of the solution. 
Choose two.) 


A. Install PSwaWebApplication 
B. Add PswaAuthorizationRule 
C. Set-WSManInstance 

D. Set-WSManQuickConfig 

E. Set-BCAuthentication 


Answer: A, B 


Configure PowerShell Web Access Gateway using the following PowerShell Cmdlet. 
Install-PswaWebApplication —UseTestCertificate 

Running the cmdlet installs the Windows PowerShell Web Access web application within the IIS 
Default Web Site container. The cmdlet creates the infrastructure required to run Windows 
PowerShell Web Access on the default website, Error! Hyperlink reference not valid.. 
Add-PswaAuthorizationRule 

Adds a new authorization rule to the Windows PowerShell Web Access authorization rule set. 
Parameters: 

ComputerGroupName 

ComputerName 

ConfigurationName 

RuleName 

UserGroupName 

UserName 

Credential (Windows Server 2012 R2 and later) 

References: 

http://technet.microsoft.com/en-us/library/hh849867.aspx 
http://technet.microsoft.com/en-us/library/hh849875.aspx 
http://technet.microsoft.com/en-us/library/jj592890(v=wps.620).aspx 
http://technet.microsoft.com/en-us/library/hh848404(v=wps.620).aspx 
http://technet.microsoft.com/en-us/library/jj592894(v=wps.620).aspx 


Question: 19 


Your network contains an Active Directory domain named contoso.com. The domain contains a 
server named Serverl that runs Windows Server 2012 and a server named Server2 that runs 
Windows Server 2008 R2 Service Pack 1 (SP1). Both servers are member servers. 


On Server2, you install all of the software required to ensure that Server2 can be managed remotely 
from Server Manager. 

You need to ensure that you can manage Server2 from Server1 by using Server Manager. 

Which two tasks should you perform on Server2? (Each correct answer presents part of the solution. 
Choose two.) 


A. Run the Enable-PSRemotingcmdlet. 
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B. Run the Configure-SMRemoting.psl script. 

C. Run the Enable-PSSessionConfigurationcmdlet. 
D. Run the Set-ExecutionPolicycmdlet. 

E. Run the systempropertiesremote.exe command. 


Answer: B, D 


Explanation: 

To configure Server Manager remote management by using Windows PowerShell 

On the computer that you want to manage remotely, open a Windows PowerShell session with 
elevated user rights. 

In the Windows PowerShell session, type the following, and then press Enter. 

Set-ExecutionPolicy —ExecutionPolicyRemoteSigned (D) 

Type the following, and then press Enter to enable all required firewall rule exceptions. 
Configure-SMRemoting.ps1 -force —enable (B) 


Question: 20 


Your network contains an Active Directory domain named contoso.com. The domain contains two 
member servers named Server1 and Server2 that run Windows Server 2012 R2. 

You log on to Server1. 

You need to retrieve the IP configurations of Server2. 

Which command should you run from Server1? 


A. winrm get server2 

B. dsquery »% -scope base -attrip/server2 
C. winrs -r:server2ipconfig 

D. ipconfig> server2.ip 


Answer: C 


Explanation: 

Windows Remote Management allows you to manage and execute programs remotely 

References: 

Exam Ref 70-410: Installing and Configuring Windows Server 2012: Objective 4.3: Deploy and 
Configure the DNS service, Chapter 4 Deploying and Configuring core network services, p. 246 
http://technet.microsoft.com/en-us/library/dd349801(v=ws.10).aspx 
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